Skip to content
OpenAdvisories

Archive

23 April 2019

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.5

    Null pointer dereference in TensorFlow leads to exploitation

    Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.

  • Medium 6.3

    Privilege escalation in mysql-connector-jav

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where M…

  • Medium 5.7
    CVE-2019-7303 Public exploit

    Snapd seccomp filter TIOCSTI ioctl bypass

    A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, …

  • Medium 6.1

    Cross-site Scripting in Apache Zeppelin

    Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".